-
Notifications
You must be signed in to change notification settings - Fork 1.8k
jira_integration: changes risk acceptance expiration date to a better default #13488
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
🔴 Risk threshold exceeded.This pull request modifies sensitive files related to database migrations and Jira integration (dojo/db_migrations/0245_alter_jira_instance_accepted_mapping_resolution.py, dojo/jira_link/helper.py, and dojo/models.py), triggering configured codepath alerts; review these changes carefully against your .dryrunsecurity.yaml allowed paths/authors before merging.
🔴 Configured Codepaths Edit in
|
| Vulnerability | Configured Codepaths Edit |
|---|---|
| Description | Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml. |
🔴 Configured Codepaths Edit in dojo/models.py
| Vulnerability | Configured Codepaths Edit |
|---|---|
| Description | Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml. |
🔴 Configured Codepaths Edit in dojo/db_migrations/0245_alter_jira_instance_accepted_mapping_resolution.py
| Vulnerability | Configured Codepaths Edit |
|---|---|
| Description | Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml. |
We've notified @mtesauro.
All finding details can be found in the DryRun Security Dashboard.
|
That linting rule looks like a suggestion than anything folks, applying the suggestion will make the rest of the similar code look odd. Other than that this looks good to me @valentijnscholten |
I made it pass the Ruff linter as that's a requirement. |
Fixes #13439